Italy’s Surveillance Toolbox Riccardo Coluccini @ORARiccardo 34C3 27th-30th December 2017
OSINT
OSINT • Google Search VAT numbers
OSINT • Payments by Ministry of Interior due to transparency law n°33/2013
OSINT • Google Search Tender Identification Codes
OSINT • Public Procurement datasets available in xml format due to anti-corruption law n°190/2012
How does it work? Tender Identification code Public Procurement dataset xml List of companies participating Technical and Invoices economic offers *FOIA law recently introduced in Italy
Companies
IMSI-catchers • CPM Elettronica official reseller of CellXion
IMSI-catchers • Who are the participants?
IMSI-catchers • Specs
IMSI-catchers
IP Interception • Public money used to fund interception probes
IP Interception
SOCMINT (CRAIM) • Web scraping to collect audio, speech-to-text, speaker identification, and voice fingerprints
SOCMINT (CRAIM) • FOIA request to obtain technical offers: access partially granted
SOCMINT (CRAIM)
Face Recognition (SARI) • System Architecture
Face Recognition (SARI) • System specs for Enterprise and Real-Time
FOIA • Invoices
Secret tenders • Transparency laws differs for the Ministry of Defense
Secret tenders • BEAGLE (sort of weaker version of XKeyscore)
What’s next? • FOIA requests to obtain: • Invoices • Technical and economic offers • Expand the database of companies • Monitor Government expenditures • Analyze the legal framework for the use of each tech • Involve activists from other countries
Workshop @ Rights & Freedoms assembly
Thank you! • Contacts riccardo.coluccini@hermescenter.org 34C3 27th-30th December 2017
Recommend
More recommend